[Git][security-tracker-team/security-tracker][master] Add new node-qs issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0309593f by Salvatore Bonaccorso at 2026-10-16T07:10:14+02:00
Add new node-qs issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1013,7 +1013,9 @@ CVE-2026-110841 (n8n before 2.41.4 and 2.42.0 contains an authorization bypass i
 CVE-2026-110840 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection v ...)
 	NOT-FOR-US: n8n
 CVE-2026-110816 (### Summary    `qs.stringify` with `arrayFormat: 'comma'` throws `Type ...)
-	TODO: check
+	- node-qs <unfixed>
+	NOTE: https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw
+	NOTE: https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727 (v6.16.1)
 CVE-2026-110810 (A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This ...)
 	TODO: check
 CVE-2026-110809 (A security vulnerability has been detected in sgl-project SGLang up to ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0309593fa7648872ccdd9b845d8a698f30a5b2c8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0309593fa7648872ccdd9b845d8a698f30a5b2c8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/5a20c3c1/attachment-0001.htm>